Adding Contour service to supervisor fails: ErrImageRefsMissing

Products

• VMware NSX
• VMware vSphere Kubernetes Service

Issue/Introduction

• An attempt is made to install Contour.
• Post deployment Contour pods hang in a pending state before going into ErrImageRefsMissing state.
  
  kubectl get all -A | grep contour
svc-contour-domain-[ID]                   pod/contour-[ID]                                          0/1     ErrImageRefsMissing   0              xmxxs
svc-contour-domain-[ID]                   pod/contour-[ID]                                          0/1     ErrImageRefsMissing   0              xmxxs


• Describe on the pods shows the following.

  kubectl describe pod -n svc-contour-domain-[ID] contour-[ID]
Name:             contour-[ID]
Namespace:        svc-contour-domain-[ID]
...
Status:           Failed
Reason:           ErrImageRefsMissing=
Message:          failed to get image refs: Timed out with error: No image references present in pod svc-contour-domain-[ID]/contour-[ID]: ErrImageRefsMissing.
  
  

• Curl from a VM on the Contour segment to projects.packages.broadcom.com fails.
• Within an NSX environment, packet captures shows that traffic is sent out the physical NIC of the ESX host where the T0 Edge is running.

Environment

VMware NSX
VMware vSphere Kubernetes Service

Resolution

Update the physical firewall to ensure that pods on the Contour segment have network access to projects.packages.broadcom.com